dbCommand.ExecuteNonQuery(); This query works, sometimes. Because it’s built from basic strings with little in the way of data validation, it suffers from the following issues, among others: If ...

I think it's been aluded to above, but SP's or Parameterised quieries are the way to go for no other reason that security.<BR><BR>If you are combinging strings to make a query, all a hacker has to ...